CVE-2026-29115
MediumCVSS 6.9Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
Vulnerability in Dahua products allows an authenticated remote attacker to send a crafted packet, causing an exception and unexpected system reboot, leading to denial of service.
Risk Assessment
Risk of disruption to surveillance and security systems based on Dahua products, potentially affecting operational continuity.
Recommendation
Apply firmware updates from Dahua when available. Restrict device access to trusted networks only.
Other vulnerabilities in Dahua products
See all- CVE-2026-29116High
Some Dahua products have a vulnerability allowing an unauthenticated remote attacker to send a crafted packet, triggering an exception causing unexpected system reboot, leading to denial of service.
- CVE-2026-29114Low
A vulnerability in some Dahua products allows an attacker to obtain the device's CA root certificate. If that CA is installed and trusted on client systems, the attacker can issue fraudulent certificates, undermining the certificate trust chain.
Original NVD description (English source)
A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexpectedly, resulting in a denial of service.